Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e203236303432.roa
File: 352e3138322e33342e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier: nZUSO8VGwm6fXxlwweIjmJUYRl93+jl3zW/HxVuPD/8=
Subject key identifier: 56:10:8D:2D:91:3D:1D:5A:A0:4E:B9:E9:C7:E4:A5:E9:B0:E7:35:21
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1A485E62B37651DE14D199B711410D44E931B6CD
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e203236303432.roa
Signing time: Sat 11 Oct 2025 09:29:50 +0000
ROA not before: Sat 11 Oct 2025 09:24:50 +0000
ROA not after: Sat 10 Oct 2026 09:29:50 +0000
asID: 26042
IP address blocks: 5.182.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:48:5e:62:b3:76:51:de:14:d1:99:b7:11:41:0d:44:e9:31:b6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 11 09:24:50 2025 GMT
Not After : Oct 10 09:29:50 2026 GMT
Subject: CN=56108D2D913D1D5AA04EB9E9C7E4A5E9B0E73521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:01:72:4d:fd:ec:90:42:19:45:9c:27:ed:
69:62:fc:83:78:4f:ad:91:69:da:d2:b8:e5:8d:cd:
76:89:42:a2:8c:5b:3f:92:7d:77:b1:83:be:ea:2d:
89:f1:49:15:a8:3f:6c:c9:0d:b6:cc:f1:41:b6:e4:
b2:43:fc:7a:ff:fe:ec:43:6f:16:e0:97:69:1e:17:
68:f2:10:08:e4:cb:07:43:02:f2:19:1c:58:41:dd:
2e:62:3a:9c:f4:f3:95:75:40:20:2d:ed:be:8b:cd:
2f:4a:3a:fe:bf:c6:3c:1a:e3:b8:5a:46:ee:ca:14:
d9:8f:aa:31:55:37:68:cb:12:73:17:64:41:be:9e:
70:c7:6c:a9:00:69:b2:34:25:7b:07:00:ab:0a:9f:
a7:04:50:e3:56:51:c3:70:14:91:fb:ef:00:4d:7d:
49:73:82:02:09:15:9c:02:c8:b7:86:f4:00:75:87:
8d:68:86:b4:55:a8:3f:de:f7:d6:f4:39:77:17:6d:
3f:09:4f:1c:a5:58:a7:32:3e:78:fa:67:5e:bc:a5:
d6:3f:11:c7:ca:ec:c4:85:8e:df:76:56:15:4e:8d:
55:fb:68:0a:90:1b:34:cb:71:df:92:a3:a0:43:ca:
f8:b2:ec:b7:5e:3b:7a:0c:5f:90:c4:98:0b:05:e1:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:10:8D:2D:91:3D:1D:5A:A0:4E:B9:E9:C7:E4:A5:E9:B0:E7:35:21
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:91:ef:af:0e:5c:2b:bb:d8:f4:69:b7:54:1a:90:8e:04:bb:
e9:08:66:8f:00:e6:07:6f:30:4a:2c:f6:dc:e9:31:af:6a:eb:
27:54:00:4f:0f:f0:19:4a:1b:19:28:c3:30:e6:67:1a:0a:4f:
a5:81:6f:db:14:4c:b6:2b:54:84:98:b0:50:76:4e:f4:8b:bb:
31:23:42:a3:92:e9:cb:ba:47:8c:54:ce:3c:09:2f:ec:c6:ac:
e2:df:ea:4c:91:aa:85:ca:30:93:b0:ad:8a:71:14:54:19:12:
ed:fd:61:47:61:74:82:86:de:d3:bf:f3:76:0a:2c:ee:6c:5e:
97:00:50:06:db:ab:8b:e7:9b:e9:af:0c:99:2c:6b:b4:1d:f7:
bb:c3:8b:1f:c6:b8:77:91:f8:fa:e3:1a:a1:a4:5c:bb:f0:a9:
72:b9:cb:b9:ce:f5:56:dc:b7:09:91:15:3e:6c:39:34:fc:76:
f7:17:40:15:3f:c9:21:64:40:81:6b:61:67:97:0e:f9:73:90:
6b:9e:7c:54:1d:44:25:d2:83:a2:76:37:d0:70:11:52:0c:5b:
7b:bc:a7:e0:f3:4c:cc:b6:d8:5f:ed:de:e8:a9:d8:1c:4f:97:
bb:90:e4:5e:5c:bb:67:bd:46:8a:86:83:aa:62:8c:93:ab:ee:
d6:cc:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:45 2025 by rpki-client